MAL-2025-171986 Malicious code in viniciussouza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8eaae0f9e21548bf6dd9524528974effbd379a7096abb452aef142b84edc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170777 Malicious code in akuuong (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374639329cff2d34fb2c42d21bf2e2cf1f108f52344109d0658c60fcfa79ea2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbdcd20d4a5118e3a20196d51fd8468be14fc4e0f4fe5d79ce3775f92d8d9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-bunian-ciu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576fb5d4ba515ed27af218cd41989a81e29ea852a69c29848a077cae465962f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-ujakaaubaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a3334670495e83437e2262035379865879249a1fdddc2a0d001f3df59b8345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iyujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a829f415466c5c479c972f6ee855bbb2bcf23cea6c15691910ea6e2fa0770ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-daronakoaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f9dfc9577e3c9bd5a5fe703c903f83c1bf7d1264d14bd87325b6cb1333e47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuas-miga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5d71994e2442260c948479c34eb80fe993e71e71786a0600d0beeae35d2c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milaoa-dudio-nsastuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc521ce502d8cd92683d3124e27792831156421118f88df1279a4af6b186688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e185bcb2b42832ff146c44745731f7c0d830e2e444d5a32113cc5f2438e5bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubilio-igusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb06cfb6697399ed887f7d50302fe4ef23786d964e116254bfb70a2e452a383a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyaudtu-tauut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206225f292849743133a34d305b23bc87f87a77d7b7fc5e2c2a37875b9232251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aioba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af9ac507b5a3980e58268ad44db59ebb1475aaeb6abad02ea93ffefe938c477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-transfor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee05a9ad01869ba3cc76576534440ce6938be87773769fd946b048d4ba099551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finish-sf-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7e82112ad1c5f40949b1f65e1e04db0386e5d9d24101e4d92c41c012b4817a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dxds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fadc474dc80ebe47ed2d91a6e5d99fc55a7c7e90c56b74c798dcfa373dc4755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-treua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969e5bd440734c14899b862bee49d851fac31af4074570cbd5740ab5e2004689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168030 Malicious code in teagood-yakuza7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62703a9382322bb8db38861f79cc8ff1068ee047e6e9abb0045cf55119994d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-sedssad-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c22d94b17a49d0d60d785b3fb6366197ac87488941b03f2de9c8f13752cf5bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...